From a95c4347d9e0cddf2cff6258ecfa7682aee2a1f8 Mon Sep 17 00:00:00 2001 From: grikos Date: Sat, 29 Aug 2020 20:19:46 +0300 Subject: [PATCH] fixed typo in tag --- .../win_using_sc_to_change_sevice_image_path_by_non_admin.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/process_creation/win_using_sc_to_change_sevice_image_path_by_non_admin.yml b/rules/windows/process_creation/win_using_sc_to_change_sevice_image_path_by_non_admin.yml index 645b0034a..8f456adc6 100644 --- a/rules/windows/process_creation/win_using_sc_to_change_sevice_image_path_by_non_admin.yml +++ b/rules/windows/process_creation/win_using_sc_to_change_sevice_image_path_by_non_admin.yml @@ -6,7 +6,7 @@ references: - https://pentestlab.blog/2017/03/30/weak-service-permissions/ tags: - attack.persistence - - attack.defence_evasion + - attack.defense_evasion - attack.privilege_escalation - attack.t1574.011 status: experimental